Security

The short version: your data is encrypted in transit, isolated per account with row-level access controls, and stored on reputable managed infrastructure. If you ever find a security issue, tell us at info@dailygrow.net and we'll act on it.

1. Our approach

Daily Grow holds personal information — your tasks, habits, finances, and reflections — so we treat security as part of the product, not an afterthought. We aim to collect only what the app needs, isolate each account's data, and rely on well-established providers rather than rolling our own security-critical systems.

2. Encryption

• In transit: all traffic between your device and Daily Grow is encrypted using HTTPS/TLS.
• At rest: your data is stored on managed infrastructure that encrypts data at rest.

3. Access controls

• Row-level security ensures your records are only accessible to your account — one user cannot read another user's data.
• Authenticated access is required for every request that touches your data.
• Least privilege: internal access to production data is limited to what's necessary to operate and support the Service.

4. Infrastructure

We build on reputable managed hosting and database providers that maintain their own security programs and industry certifications. Relying on these platforms lets us benefit from their patching, monitoring, and physical-security practices while we focus on protecting your data within the app.

5. Receipts and images

When you scan a receipt, the image is uploaded so the app can read the vendor, amount, date, and line items. These images are tied to your account and protected by the same access controls as the rest of your data. You can delete them from within the app.

6. AI processing

AI features send relevant content to trusted AI providers to generate a result for you. These providers act as processors under agreements that restrict how they may use the data, and we aim to work with providers that do not train their public models on your submitted content. See our Privacy Policy for details.

7. Backups and availability

Our infrastructure providers maintain backups to help recover from failures. Still, no online service can guarantee perfect uptime or that data is never lost, so we recommend exporting anything critical to you. Export tools are available inside the app.

8. Keeping your account safe

• Use a strong, unique password and don't reuse it elsewhere.
• Keep your email account secure, since it can be used to reset access.
• Sign out on shared devices.
• Be cautious with split-bill and share links — anyone with a link can see what it contains.

9. Responsible disclosure

We welcome reports from security researchers and users. If you believe you've found a vulnerability:

• Email info@dailygrow.net with details and steps to reproduce.
• Give us reasonable time to investigate and fix the issue before disclosing it publicly.
• Don't access, modify, or delete other users' data, or degrade the Service, while testing.

We appreciate good-faith research and will work with you to confirm and resolve valid reports.

10. Contact

Security questions or reports? Email info@dailygrow.net.